CVE-2022-31173
High
Description
Juniper is a GraphQL server library for Rust. Affected versions of Juniper are vulnerable to uncontrolled recursion resulting in a program crash. This issue has been addressed in version 0.15.10. Users are advised to upgrade. Users unable to upgrade should limit the recursion depth manually.
SeverityHigh
CVSS7.5
Exploit probability—
ProductJuniper
PublishedAug 1, 2022
First seenAug 1, 2022
Weakness typeCWE-400Uncontrolled resource consumption
How to fix
Update
- juniper_project juniper0.15.10 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| juniper_project juniper | v < 0.15.10 | 0.15.10 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.